The current version is 1.3.9e.

Far as I know, this is still the recommended way to secure files and folders:

https://www.zen-cart.com/tutorials/index.php?article=9

Of course, you'll also change the name of the admin folder, and some people password-protect the admin login.